6

CVE-2003-0904

Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Exchange Server Version 2003 Update -
Microsoft ≫ Sharepoint Services Version 2.0
Microsoft ≫ Windows Server 2003 SwEdition enterprise HwPlatform x64
Microsoft ≫ Windows Server 2003 Version - SwEdition datacenter HwPlatform x64
Microsoft ≫ Windows Server 2003 Version - SwEdition standard HwPlatform x64
Microsoft ≫ Windows Server 2003 Version - SwEdition web
Microsoft ≫ Windows Server 2003 Version r2 HwPlatform x64
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.16% 0.941
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6 6.8 6.4
AV:N/AC:M/Au:S/C:P/I:P/A:P
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://secunia.com/advisories/10615
Third Party Advisory
http://www.kb.cert.org/vuls/id/530660
Third Party Advisory
US Government Resource
http://www.microsoft.com/exchange/support/e2k3owa.asp
Patch
Vendor Advisory
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0311&L=ntbugtraq&F=P&S=&P=9281
Third Party Advisory
http://www.securityfocus.com/bid/9118
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/9409
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-002
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13869
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A477
Third Party Advisory